graphqler/fuzzer/fengine/materializers/injection/html_injection_materializer.py
from .injection_materializer import InjectionMaterializer
from graphqler.utils.api import API
from ..getter import Getter
from typing import override
# The main class that's being used
class HTMLInjectionMaterializer(InjectionMaterializer):
def __init__(self, api: API, fail_on_hard_dependency_not_met: bool = False, max_depth: int = 20):
super().__init__(api, fail_on_hard_dependency_not_met)
self.api = api
self.fail_on_hard_dependency_not_met = fail_on_hard_dependency_not_met
self.max_depth = max_depth
self.getter = HTMLInjectionGetter()
# Override the getters class to add custom getters for SQL injection
class HTMLInjectionGetter(Getter):
def __init__(self):
super().__init__()
@override
def get_random_string(self, input_name: str) -> str:
return '"<h1>Hello world!</h1>"'